Senior Security Analyst

Job Summary

Reporting to the CISO, the full-time Senior Security Analyst will manage compliance and risk initiatives, ensuring audit readiness for security controls, conducting third-party assessments, and fostering a culture of continuous improvement while working remotely.

Key Responsibilities

• Serve as the primary contact for compliance audits such as SOC 1, SOC 2, and ISO 27001, ensuring security controls are effective and audit-ready
• Conduct security risk assessments for technologies and vendors, maintaining Security-owned risks within the enterprise risk management program
• Support customer security assessments and maintain customer-facing security documentation and trust artifacts

Required Qualifications

• 5-9 years of experience in cybersecurity, security compliance, or related fields within SaaS or technology organizations
• Hands-on experience with compliance frameworks like SOC 2, ISO 27001, and HIPAA
• Proven ability to drive security initiatives across cross-functional teams without direct authority
• Experience conducting security reviews of vendors and third-party providers
• Familiarity with GRC platforms such as Vanta or AuditBoard is preferred